Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
File:                     065ac7bb-bf21-3a5a-847d-e97aa48db175.roa (raw, json)
Hash identifier:          CCfXubGO42zbzMgB7x/+VF8D5vP8Q/HCWLzwLjEIbpc=
Subject key identifier:   FC:CA:A6:11:B0:9B:5E:05:1D:8B:A7:1D:90:90:82:45:FB:7D:24:19
Certificate issuer:       /CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
Certificate serial:       010D0C9F4328584AA85B9D8CDA291F040330E100
Authority key identifier: 46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     13427
IP address blocks:        137.83.103.0/24 maxlen: 24
                          173.243.64.0/20 maxlen: 20
                          192.96.17.0/24 maxlen: 24
                          192.156.255.0/24 maxlen: 24
                          198.153.60.0/22 maxlen: 22
                          2604:8d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:9d:8c:da:29:1f:04:03:30:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=a6e4b817-585a-425b-bf36-82b93ffa92fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:d4:bc:e9:4b:b9:a4:13:59:b3:3e:fc:96:
                    a8:ee:d9:c7:7f:0b:dc:17:3a:9b:b8:95:3d:9a:98:
                    90:99:9a:2f:44:0d:10:e8:0c:3a:b6:a4:24:b9:27:
                    0c:a7:c7:ab:1f:e9:01:04:e5:de:e8:d7:cb:11:f5:
                    2b:5c:91:19:5f:57:f0:07:a2:31:bb:01:bd:03:17:
                    c2:bb:80:b9:20:73:a2:4c:92:9d:02:70:d2:8b:26:
                    cc:2b:75:0d:ac:5d:3a:44:4c:b9:50:b0:1a:12:65:
                    ce:ea:9c:1a:f4:d7:d4:80:e5:ff:14:b0:05:31:e0:
                    cc:7a:72:0c:38:07:0a:5c:63:b8:ff:da:c3:b7:0e:
                    7a:4d:a3:97:6b:36:47:8b:32:27:46:31:41:0c:df:
                    e1:48:fc:ee:93:d6:84:e8:6e:19:92:5d:a2:53:57:
                    1e:cb:22:92:88:95:15:ef:90:9d:80:94:3b:a5:c7:
                    0a:56:91:f3:8a:36:97:57:ba:44:9f:a4:c4:da:22:
                    f6:03:7f:2d:b1:4f:4f:91:b0:42:6e:95:18:5a:bb:
                    9b:54:55:e8:78:7c:de:ff:f0:09:b2:24:c6:cd:6e:
                    02:27:9d:22:36:e0:5f:6b:6a:1c:71:26:61:c9:e6:
                    6c:97:4c:0e:15:af:3b:fb:c7:90:47:62:2c:74:5b:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CA:A6:11:B0:9B:5E:05:1D:8B:A7:1D:90:90:82:45:FB:7D:24:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.crl

            X509v3 Authority Key Identifier:
                keyid:46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.103.0/24
                  173.243.64.0/20
                  192.96.17.0/24
                  192.156.255.0/24
                  198.153.60.0/22
                IPv6:
                  2604:8d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:20:7a:27:5f:16:64:e4:7f:98:e4:c5:ff:46:f8:4f:ff:15:
         43:d3:24:ce:24:83:44:d6:ee:ac:da:b4:dc:1a:a2:4c:86:bc:
         ae:e3:23:5d:be:08:25:88:77:78:31:56:b1:cf:f4:48:91:e7:
         3a:1e:dd:7c:95:6c:81:f1:e5:16:23:8d:0a:a1:59:48:46:fe:
         af:e6:31:97:f3:77:79:2d:45:3e:e0:41:7d:c4:d7:a8:47:11:
         6d:6a:ff:c1:8a:05:25:fe:1f:39:17:16:92:18:75:c0:cb:10:
         d9:7b:38:9d:da:5d:31:f6:f3:b9:de:57:f6:67:cf:17:83:97:
         0f:d5:3b:8a:b1:09:a4:12:67:e1:ba:20:79:f5:e3:bf:12:29:
         a2:ae:66:6c:83:b5:6d:72:62:3c:0f:ba:c8:92:55:3e:c5:c4:
         af:b0:80:d5:1e:0e:45:c4:e6:9c:c5:21:a3:03:90:ab:38:b8:
         82:63:8c:1d:02:7a:95:ef:32:ef:93:7b:0a:ca:f5:e2:1c:f2:
         90:f6:9a:06:53:a0:93:07:ef:46:52:a4:13:7b:87:3a:06:be:
         7c:67:57:0a:74:d1:d7:bd:ef:b6:99:4c:a8:5b:0f:aa:18:54:
         2a:9d:e2:6b:de:91:57:a7:c8:e2:69:c9:eb:04:18:32:03:f0:
         77:83:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:40 2025 by rpki-client